Darren Shepherd
c25f1ab1b6
Check for error on mkdir
5 years ago
Darren Shepherd
130e6e31a1
Merge pull request #1664 from KnicKnic/windows-18-build
...
fix build windows v1.18
5 years ago
Darren Shepherd
e4f87f51e2
Merge pull request #1681 from KnicKnic/fix_file_paths
...
fix usage of path instead of filepath
5 years ago
Darren Shepherd
7d06d2ccc1
Merge pull request #1653 from KnicKnic/enable_agent_windows
...
enable agent to start on windows
5 years ago
Knic Knic
44b8af097c
fix usage of path instead of filepath
5 years ago
Erik Wilson
2c49341113
Merge pull request #1669 from erikwilson/manifest-mod-time
...
Check modification time before deploying manifests
5 years ago
galal-hussein
1d6b83d8a4
go generate
5 years ago
Erik Wilson
fec2c271c2
Check modification time before deploying manifests
5 years ago
Knic Knic
d919a0b998
Mock out rootlessports on windows
5 years ago
Darren Shepherd
dfcbd5a3c1
Update generated code
5 years ago
Darren Shepherd
a8d96112d9
Updates for k8s v1.18 support
5 years ago
Knic Knic
7f77c9a3c8
enable agent to start on windows
5 years ago
Dario Nieuwenhuis
cd0b58e920
Correctly quote auth strings in containerd config. Fixes #1610
5 years ago
louis
f2a4e1d57d
feat: add master taint toleration to klipper, coredns, metrics-server, traefik and local-storage
5 years ago
galal-hussein
2b6faa925f
use mirrored images for traefik and coredns
5 years ago
galal-hussein
356fe006a2
Add asterisks for omitted values in nodeconfig
5 years ago
galal-hussein
3f927d8006
Revert "Replace traefik with nginx"
...
This reverts commit 9a17033095
.
5 years ago
galal-hussein
c4f18227fc
default backend multiarch
5 years ago
galal-hussein
717b5a765e
use multiarch image for nginx
5 years ago
Erik Wilson
ceff3f58fb
Merge pull request #1466 from galal-hussein/traefik_to_nginx
...
Replace traefik with nginx
5 years ago
galal-hussein
9a17033095
Replace traefik with nginx
5 years ago
Erik Wilson
8725798578
Merge pull request #1464 from erikwilson/selinux-update
...
Simplify SELinux detection and add --disable-selinux flag
5 years ago
Erik Wilson
a3cb9ee1f6
Simplify SELinux detection and add --disable-selinux flag
5 years ago
Erik Wilson
0aeea78060
Merge pull request #1444 from KnicKnic/k3s_build_windows
...
K3s build windows (no agents)
5 years ago
Darren Shepherd
4d32fe9959
Support SELinux
5 years ago
Erik Wilson
4210800648
Merge pull request #1343 from ibuildthecloud/rootless
...
Create pidns for rootless
5 years ago
Knic Knic
c2db115ec3
fix formatting
5 years ago
Knic Knic
2346ccc63f
get build on windows and get api_server to work
5 years ago
Knic Knic
522e08872a
do not rename inuse files
5 years ago
Erik Wilson
fe45eb008a
Merge pull request #1416 from erikwilson/device-plugins-path
...
Use default kubelet device-plugins path
5 years ago
galal-hussein
d49ef31767
Inject node config on startup
5 years ago
Erik Wilson
b15c4473cd
Use default kubelet device-plugins path
5 years ago
Darren Shepherd
782004bec9
Create pidns for rootless
5 years ago
Erik Wilson
0374c4f63d
Add --disable flag
5 years ago
Erik Wilson
3592d0bdd9
Merge pull request #1344 from ibuildthecloud/dialer-fallback
...
If tunnel session does not exist fallback to default dialer
5 years ago
Erik Wilson
1a2690d7be
Merge pull request #1192 from galal-hussein/add_encryption_config
...
Add secret encryption config
5 years ago
Darren Shepherd
bf57a7f419
Don't start node controller if coredns is not deployed
5 years ago
Darren Shepherd
3396a7b099
If tunnel session does not exist fallback to default dialer
5 years ago
Erik Wilson
1b23c891dd
Merge pull request #1304 from erikwilson/fixup-cadvisor
...
Run kubelet with containerd flag
5 years ago
Erik Wilson
4cacffd7e6
Merge pull request #1298 from erikwilson/warn-npc-fail
...
Warn if NPC can't start rather than fatal error
5 years ago
Erik Wilson
fa03a0df3c
Run kubelet with containerd flag
...
The containerd flag was accidentally added to kubelet and is
deprecated, but needed for cadvisor to properly connect with
the k3s containerd socket, so adding for now.
5 years ago
Erik Wilson
5b98d10e4b
Warn if NPC can't start rather than fatal error
...
If the ip_set kernel module is not available we should warn
that the network policy controller can not start rather than
cause a fatal error.
Also adds module probing and config checks for ip_set.
5 years ago
Erik Wilson
7675f9f85c
Clean up host-gw variable names
5 years ago
Segator
c23f12765e
hostgw flannel support
5 years ago
Segator
6736e24673
support hostgw
5 years ago
Erik Wilson
9421746ccf
Merge pull request #1235 from ibuildthecloud/master
...
Fix uint64 truncation issue in dqlite
5 years ago
galal-hussein
388cd9c4e8
Add secret encryption configuration
5 years ago
Darren Shepherd
9bda58c81a
Fix uint64 truncation issue in dqlite
5 years ago
galal-hussein
07d4c1510d
Add lease permissions to ccm cluster role
5 years ago
Erik Wilson
5c37454762
Merge pull request #1198 from narqo/tunel-addr-join-host-port
...
Respect IPv6 when building proxy address
5 years ago
Erik Wilson
9b2538c2c4
Set wireguard persistent-keepalive on wg set peer
5 years ago
Erik Wilson
3376f31fc2
Revert "Merge pull request #1190 from erikwilson/wireguard-keepalive"
...
This reverts commit e712cdf7e8
, reversing
changes made to d5929bc8c8
.
Wireguard docs fail to describe that persistent-keepalive is only valid
when peer is set.
5 years ago
Vladimir Varankin
0c5299c951
pkg/agent/tunnel: respect ipv6 when building proxy addresses
5 years ago
Erik Wilson
6875b11dd2
Fix identity_token -> identitytoken for containerd toml
5 years ago
Darren Shepherd
4acaa0740d
Small dqlite fixes
5 years ago
Erik Wilson
97383868bd
Merge pull request #1186 from erikwilson/upgrade-k8s-1.17.0
...
Upgrade k8s to v1.17.0
5 years ago
Erik Wilson
e712cdf7e8
Merge pull request #1190 from erikwilson/wireguard-keepalive
...
Set Wireguard keepalive to 25 seconds
5 years ago
Erik Wilson
5679a8bd2f
Update generated
5 years ago
Erik Wilson
76281bf731
Update k3s for k8s 1.17.0
5 years ago
Erik Wilson
814c302d7c
Merge pull request #955 from btashton/servicelb-sysctl
...
Enable ip forwarding on both all and default net config
5 years ago
Erik Wilson
7b62811f98
Set Wireguard keepalive to 25 seconds
5 years ago
Erik Wilson
d4959d53af
Merge pull request #1182 from erikwilson/docker-pause-image
...
Allow --pause-image to set docker sandbox image also
5 years ago
Erik Wilson
2eacfa75cb
Merge pull request #1180 from erikwilson/cleanup-flannel-backend-help-text
...
Cleanup --flannel-backend help text
5 years ago
Erik Wilson
56b0743653
Merge pull request #1171 from dweomer/mutable-labels
...
Mutable --node-label values for server/agent sub-commands.
5 years ago
Erik Wilson
c2be59e5f3
Allow udp protocol for service-lb ports
...
For #577
5 years ago
Brennan Ashton
a952d5c32a
Default device net config enables ip forwarding
...
The Linux kernel is inconsistent about how devconf is configured for new
network namespaces between ipv4 and ipv6. The behavior can also be
controlled via net.core.devconf_inherit_init_net in Linux 5.1+ so make
sure to enable forwarding on all and default for both ipv6 and ipv4.
This issue first came up testing on a yocto kernel that had this patch:
ipv4: net namespace does not inherit network configurations
[0] https://www.kernel.org/doc/html/latest/admin-guide/sysctl/net.html#devconf-inherit-init-net
[1] https://lkml.org/lkml/2014/7/29/119
Signed-off-by: Brennan Ashton <brennana@jfrog.com>
5 years ago
Erik Wilson
2de93d70cf
Allow --pause-image to set docker sandbox image also
5 years ago
Erik Wilson
11e4d01efe
Cleanup --flannel-backend help text
5 years ago
Jacob Blain Christen
063efb25bb
Mutable --node-label values for server/agent sub-commands.
...
Values passed in via the server/agent `--node-label` flag are treated as mutable. They are passed through to the kubelet just as before but after the kubelet comes up they are applied again. This allows for passing labels a k3s start-time that may be necessary for scheduling but may change from boot to boot, e.g. `k3os.io/version` after an upgrade.
Tested locallon on my amd64 workstation with the docker container.
Addresses #1119 .
5 years ago
yuzhiquan
24869ddf21
remove []byte trans, handle func error
5 years ago
yuzhiquan
7cc0110081
fix typo
5 years ago
Erik Wilson
ce3a03a16a
Merge pull request #1111 from dduportal/patch-1
...
Bump Traefik to 1.7.19
5 years ago
dduportal
9598a527a2
Regenerate bindata
...
Signed-off-by: dduportal <1522731+dduportal@users.noreply.github.com>
5 years ago
Guangbo Chen
8ff4c3c256
Update base pause image to rancher repo
5 years ago
galal-hussein
99b8222e8d
Change storage to datastore
5 years ago
Darren Shepherd
c2e7f9c7b0
Add logging parameters
5 years ago
Darren Shepherd
4e544bded2
Delete unused code
5 years ago
Darren Shepherd
ff34c5c5cf
Download cert/key to agent with single HTTP request
...
Since generated cert/keys are stored locally, each server has a different
copy. In a HA setup we need to ensure we download the cert and key from
the same server so we combined HTTP requests to do that.
5 years ago
Erik Wilson
95ff805c98
Fix broken K3S_TOKEN env
5 years ago
Darren Shepherd
77703b90ff
Don't ever change 10252/10251 ports
...
Kubernetes componentstatus check is hardcoded to 10252 and 10251
so we should never change these ports. If you do componentstatus
will return error.
5 years ago
Erik Wilson
d4151b7739
Add the --with-node-id flag to agent
5 years ago
Erik Wilson
670d4b4162
Merge pull request #914 from erikwilson/validation-utilities
...
Add check-config for system validation
5 years ago
Erik Wilson
a73f8b1773
Update check-config.sh for k3s
5 years ago
Darren Shepherd
9a4df7c05c
Merge pull request #1058 from ibuildthecloud/master
...
Update kine/dynamiclistener
5 years ago
Darren Shepherd
6063317144
Add a couple more known SANs
5 years ago
Erik Wilson
e4b3730fa2
Go DNS lookup order hack
5 years ago
Erik Wilson
d383d1b47e
Merge pull request #1054 from erikwilson/sort-deployments
...
Use lexical (sorted) order for file deployments
5 years ago
Erik Wilson
b298733b3f
Use lexical (sorted) order for file deployments
5 years ago
Erik Wilson
55c05ac500
Refactor node password location
5 years ago
Erik Wilson
eff502342a
Fix node-passwd on upgrade missing 3 columns
5 years ago
Darren Shepherd
3e213d1347
Allow --debug to be set with K3S_DEBUG env var
5 years ago
Darren Shepherd
668fcf7e83
Fix broken --cluster-reset
5 years ago
Darren Shepherd
b2439788d7
Reduce logging in dqlite
5 years ago
Darren Shepherd
0ae20eb7a3
Support both http and db based bootstrap
5 years ago
Darren Shepherd
3f5fb70116
Move server arguments to experimental for dqlite related
5 years ago
Darren Shepherd
29b270dce6
Wait for apiserver to be health, not just running
5 years ago
Darren Shepherd
e2431bdf9d
Add dqlite support
5 years ago
Darren Shepherd
53d3ab074c
Shrink k3s wrapper binary
5 years ago
Darren Shepherd
91cacb3a14
Fix server join issues
5 years ago
Erik Wilson
e9a11c7cc4
Update generated code
5 years ago
Erik Wilson
47a94637dc
Move metrics-server manifests to sub-directory
5 years ago
Erik Wilson
01f6e0e64e
Add context to server daemon functions that wait
5 years ago
larmog
7aa3d08385
Wait for api-server to report version after starting
5 years ago
Erik Wilson
c4eb6ea3ef
Update generated data
5 years ago
Erik Wilson
0fef39de65
Add default multi-arch metrics-server deployment
5 years ago
Erik Wilson
931f63073f
Merge pull request #899 from mrueg/coredns-ready
...
coredns: Add readinessProbe
5 years ago
Erik Wilson
2bbc356f65
Merge pull request #1008 from erikwilson/ip6-system-setup
...
Improve ip6 system setup & utilities
5 years ago
Erik Wilson
afa9422ad9
Improve ip6 system setup & utilities
5 years ago
Darren Shepherd
609c5e5f51
Update generated code
5 years ago
Darren Shepherd
ba240d0611
Refactor tokens, bootstrap, and cli args
5 years ago
Manuel Rüger
e8ca18ab2b
coredns: Add readinessProbe
5 years ago
Erik Wilson
8a8fa8a351
Update go generated data
5 years ago
YAMAMOTO Takashi
4970d6133f
Propagate DisableAgent flag
...
The recent setMasterRoleLabel stuff uses it.
5 years ago
Erik Wilson
f648a64ee3
Merge pull request #923 from AkihiroSuda/fix-rootless-kubelet-flags
...
rootless: add kubelet flags automatically
5 years ago
Akihiro Suda
aafccdbccb
rootless: add kubelet flags automatically
...
Fix https://github.com/rancher/k3s/issues/784
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
5 years ago
Erik Wilson
ad4ea681ce
Hide the --disable-agent flag
5 years ago
Erik Wilson
1cd3786a6a
Merge pull request #952 from btashton/bump-klipper-lb
...
Bump klipper-lb version
5 years ago
Brennan Ashton
af7dc09f5c
Bump klipper-lb version
...
Signed-off-by: Brennan Ashton <brennana@jfrog.com>
5 years ago
Erik Wilson
aed163b338
Remove trailing whitespace trimming from containerd template
5 years ago
Erik Wilson
2ff2baba49
Merge pull request #913 from erikwilson/kube-router-network-policy
...
Add network policy support
5 years ago
Erik Wilson
da3a7c6bbc
Add network policy controller
5 years ago
Erik Wilson
1df72d14b8
Cleanup containerd config template spacing
5 years ago
Erik Wilson
90df4a1921
Use containerd-shim-run-v2
5 years ago
Erik Wilson
12307a4a69
Fallback to /etc/strongswan for config
...
Needed for docker image
5 years ago
Darren Shepherd
30c14a4db6
Merge pull request #901 from erikwilson/default-kubelet-dir
...
Use default kubelet directory
5 years ago
Erik Wilson
0ee586c233
Merge pull request #894 from galal-hussein/fix_master_label_ha
...
Fix Master label in HA setups
5 years ago
Erik Wilson
265181715a
Merge pull request #892 from iwilltry42/master
...
[Enhancement] include subdirectories for auto-deploy manifests
5 years ago
Erik Wilson
9e14d3e470
Merge pull request #851 from MagnaXSoftware/switch-string-slice
...
Add comma-separated no-deploy values
5 years ago
galal-hussein
7c60285435
Fix master role label in ha setups
5 years ago
Xavier Landreville
2f4a08c54d
Add comma-separated no-deploy values
...
This allows no-deploy values to be either specified as multiple --no-deploy invocations,
or a single invocation with comma-separated values.
5 years ago
galal-hussein
d2c1f66496
Add k3s cloud provider
5 years ago
Erik Wilson
c72ef62d2c
Use default kubelet directory
5 years ago
Thorsten Klein
50017c39a2
include subdirectories for auto-deploy manifests
5 years ago
Erik Wilson
c12d2a1aea
Merge pull request #867 from galal-hussein/private_reg
...
Add private registry support to containerd
5 years ago
galal-hussein
436ff4ef63
fix cert rotation function
5 years ago
galal-hussein
5ccc880ddb
Add private registry to containerd
5 years ago
Erik Wilson
cac41db0e1
Merge pull request #816 from galal-hussein/default_local_storage
...
Add default storage class
5 years ago
galal-hussein
2dc5ba5bae
Add certificate rotation
5 years ago
galal-hussein
56e0e5ad7e
Add default local storage provisioner
5 years ago
Erik Wilson
6f7a1a70fa
Label new flannel flags as experimental
5 years ago
Erik Wilson
0af32bba75
Use newest flannel API
5 years ago
Erik Wilson
999e40d6d3
Add strongswan utilities for ipsec
5 years ago
Erik Wilson
959acf9c92
Add --flannel-backend flag
5 years ago
Erik Wilson
359a77939c
Enable hairpin mode
5 years ago
Erik Wilson
36fa425d45
Enable extension and ipsec flannel backends
5 years ago
Erik Wilson
3cd807a657
Add --flannel-conf flag
5 years ago
Darren Shepherd
8dcc09f7be
Update generated code
5 years ago
galal-hussein
b1891f445b
Add master role label on startup
5 years ago
Erik Wilson
db9540aa10
Bump CoreDNS to v1.6.3
5 years ago
Darren Shepherd
36ca606073
Merge pull request #793 from yamt/noderestriction
...
Add back NodeRestriction
5 years ago